Insider Threat Analyst

We are looking for a skilled and experienced L2 Insider Threat- IRM Analyst to join our Cyber Security team at WTW. In this role, you will be investigating Insider Risk Management (IRM) cases escalated by the L1 Insider Threat team, with guidance from the Insider Threat - IRM Operations Manager. Your primary responsibilities will include performing advanced analysis of Insider Threat and IRM cases across various egress channels, interpreting and prioritizing threats using IRM and DLP tools, collaborating with stakeholders during investigations, preparing detailed reports on security incidents, and contributing to the enhancement of detection policies and operational documents. You should have in-depth experience in an L2 IRM/ DLP or Insider Threat Analyst role within a global enterprise organization, along with relevant Microsoft Qualifications for Purview IRM, Defender, and DLP. Proficiency in Purview IRM, Defender, and DLP tools, strong analytical and investigative skills, effective communication abilities, self-motivation, stakeholder management skills, reliability, and proficiency in security tools like Microsoft Sentinel SIEM, EDR, and forensic analysis tools are essential for this role. Additionally, familiarity with Kusto Query Language (KQL) and understanding of data protection laws and industry certifications such as CISSP or CIPP would be beneficial. As an L2 Insider Threat- IRM Analyst, you will play a crucial role in enhancing Insider Risk and IRM policies and standards, coaching and mentoring L1 IRM Analysts, and supporting projects that contribute to the overall security posture of the organization. Your ability to identify trends, patterns, and complex security issues, make informed decisions, and work effectively in a diverse environment will be key to succeeding in this position.,